Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File:                     1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier:          WBSmm+njX9FMpese/JRE+kjfsvOe2ln3sTtzZoKq1/k=
Subject key identifier:   E7:CB:B9:BC:9E:35:C8:62:4B:87:F7:7E:48:95:7E:91:A3:31:98:87
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer:       /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial:       01988FFDF9371C80B3EFDDA5C13E1D55DE15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number:          0955
Signing time:             Sat 09 Aug 2025 18:00:42 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:42 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:42 +0000
Files and hashes:         1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: Fx74oOX0tMBzX0pWFcPyVU2k1CFv5Vtfg+3TJy5FTBQ=)
                          2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
                          3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fd:f9:37:1c:80:b3:ef:dd:a5:c1:3e:1d:55:de:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
        Validity
            Not Before: Aug  9 18:00:42 2025 GMT
            Not After : Aug 10 18:00:42 2025 GMT
        Subject: CN=e7cbb9bc9e35c8624b87f77e48957e91a3319887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:0b:c0:c2:03:4f:61:e6:b6:bd:91:5e:f7:
                    0b:4f:38:39:d4:e1:db:8b:4f:6f:4b:36:03:9d:34:
                    c9:5c:b2:26:6e:8a:c2:db:4c:2e:64:4e:83:a5:f5:
                    ba:ed:d7:b9:76:61:7e:ae:72:1c:45:fa:b5:65:b0:
                    db:17:1b:a6:ce:4e:02:19:ec:ed:d4:cf:f9:aa:94:
                    a2:f2:a3:32:22:8d:42:85:43:16:ff:56:70:9a:b5:
                    d3:d5:56:0d:7e:6a:19:23:9f:20:c9:67:59:18:ea:
                    35:6a:ab:5d:d4:5c:cd:bd:76:1c:ed:9f:f7:e7:a7:
                    d7:59:0d:e6:ef:89:29:14:ff:20:5d:26:c9:f6:fd:
                    e8:24:c1:94:bd:e3:74:f1:98:55:17:cf:4e:f0:3d:
                    d3:06:ba:4d:c7:1b:86:41:3b:fe:6d:ea:4a:42:6b:
                    28:a8:d0:62:9d:ab:33:4b:a3:2f:7a:7a:40:5c:80:
                    3c:85:91:28:5b:c2:97:58:50:db:79:4c:32:7b:8d:
                    f6:3a:d6:c4:c9:8c:b4:68:a0:d3:2c:d0:19:de:5d:
                    6a:e4:2c:ae:de:74:ee:85:0f:96:45:0a:75:a5:76:
                    72:0e:39:fb:0d:ea:43:59:f0:48:7d:ca:07:58:f0:
                    8d:2a:74:de:5e:61:df:1d:68:2b:79:bd:1d:98:2e:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:B9:BC:9E:35:C8:62:4B:87:F7:7E:48:95:7E:91:A3:31:98:87
            X509v3 Authority Key Identifier:
                keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:a3:1f:f8:34:db:7c:c9:56:9f:a0:c8:22:b5:54:7d:a8:
         ea:c1:f1:ae:74:d6:4d:87:79:20:d5:bd:b0:23:54:b7:2d:e6:
         3f:87:f0:b9:16:51:eb:a4:ed:a0:1f:cd:39:6c:29:03:a7:ce:
         5e:a0:ff:20:79:36:c1:fd:48:a1:99:32:36:ae:3d:6e:a3:b3:
         a1:27:50:e8:c0:4c:c0:88:00:79:fc:6b:1c:52:0f:2e:9e:89:
         65:26:30:8c:f6:0d:d2:af:bc:1b:60:08:4c:40:3c:2d:db:46:
         be:69:bb:49:23:1b:02:26:f6:50:ad:70:f6:64:7b:50:98:ce:
         98:c4:38:b8:e7:8f:50:35:94:88:9f:70:82:bd:42:4e:f0:3e:
         24:6c:49:1b:ba:7f:00:11:40:00:fe:e1:96:fd:1e:2e:4c:3f:
         35:df:3a:87:9e:63:a2:64:df:56:62:39:84:9e:fb:cf:64:6f:
         26:81:36:c0:e0:84:8c:3d:59:f9:77:bb:9e:20:63:00:d6:58:
         fc:fb:75:58:19:95:e7:3b:dd:3e:9a:e2:3f:d9:04:84:96:75:
         e4:0c:05:fa:99:35:d0:0c:a8:fb:19:50:2a:15:c1:5f:bc:5d:
         10:3f:bd:7e:f0:14:9e:d7:81:02:28:d1:21:89:7e:e9:7e:52:
         de:74:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:46 2025 by rpki-client